CVE-2019-9531 The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to a port that can run AT commands

2019-10-0900:00:00

CWE-284

certcc

www.cve.org

9.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.6%

JSON

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention (AT) commands, including some that provide unauthenticated, shell-like access to the device.

CNA Affected

[
  {
    "product": "Explorer 710",
    "vendor": "Cobham plc",
    "versions": [
      {
        "status": "affected",
        "version": "1.07"
      }
    ]
  }
]

References

kb.cert.org/vuls/id/719689/